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DESCRIPTION 

CONNECTED COMMUNICATION TERMINAL, CONNECTING COMMUNICATION TERMINAL, 
SESSION MANAGEMENT SERVER AND TRIGGER SERVER 

& 

Technical Field 

The present invention relates to communication terminals 
utilizing a network and a server apparatus for managing sessions 
between the communication terminals, and in particular, to 
10 communication terminals and a server apparatus for Peer-to-Peer 
communication for directly sending and receiving data. 

Background Art 

Recently, use of an access network, which is a 

15 large-capacity communication broadband such as Asymmetric 
Digital Subscriber Line (ADSL) and optical fiber, and is always 
connectable, rapidly spreads among home users. In the 
conventional method of the Peer-to-Peer communication, the 
communication terminals are connected via a network to perform 

20 direct communication. One of the examples is that, in order to 
resolve an address of the terminal apparatus on the other, end of 
the communication, a server is utilized or another communication 
terminal is inquired of the address through relaying (e.g., 
Japanese Laid-Open Publication No. 2003-158553). 

25 FIG. 17 shows a communication system using the 

conventional IP telephone apparatuses described in the 
above-mentioned reference. For example, in the case when an IP 
telephone apparatus 10A calls an IP telephone apparatus 10C, the 
IP telephone apparatus 10A obtains an address of the IP 

30 telephone apparatus 10C by inquiring IP telephone apparatuses 
10B, IOC and 10D based on the phone numbers. Each of the IP 
telephone apparatuses is equipped with a Peer-to-Peer 
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communication apparatus for sending and receiving information 
based on the Peer-to-Peer method via an IP network, a phone 
number search apparatus for verifying the correspondence 
between the phone number received by the Peer-to-Peer 
communication apparatus and the phone number of the IP 
telephone apparatus. The Peer-to-Peer communication apparatus 
sends back the IP address of the IP telephone apparatus only in 
the case when the phone numbers match as a result of 
verification. 

The structure of the IP telephone apparatus shown in the 
patent literature mentioned above, however, faces a problem that 
the IP phone 10A can obtain the address of the IP telephone 
apparatus 10C without a permission of the IP telephone apparatus 
IOC. Such problem is notable especially in the case when the 
user of the IP telephone apparatus 10A is an ill-intentioned person. 
In this case, information related to an attack such as Denial of 
Service attack (DoS attack) is given to the IP telephone apparatus 
IOC. 

Another problem is that a manager such as an agent who 
manages the Peer-to-Peer communication cannot know how long 
the IP telephone apparatus 10A communicates with the IP 
telephone apparatus 10C, and thus cannot manage the 
communication. 

It is yet another problem caused in using the conventional 
IP telephone apparatuses that, in some cases, it is impossible to 
achieve real-time connection since it requires time for the 
conventional IP telephone apparatus to obtain information such as 
an IP address of a connected communication terminal when the 
connecting communication terminal communicates with the 
connected communication terminal using phone numbers. 
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Disclosure of Invention 

The present invention is to solve the problems as described 
above. A first object of the present invention is to provide 
communication terminals among which the sessions based on the 
5 Peer-to-Peer communication is established real-time, and a 
connected communication terminal can properly make judgment 
on possibility for the connection based on the request made by 
the connecting communication terminal. 
-, A second object of the present invention is to provide a 
10 session management server and a trigger server that can manage 
the Peer-to-Peer communication between the connecting 
communication terminal and the connected communication 
terminal. 

In order to achieve the above objects, the connected 

15 communication terminal apparatus according to the present 
invention is a connected communication terminal that 
communicates with a connecting communication terminal that 
requests direct communication via a network, said connected 
communication terminal including: a registration unit operable to 

20 register (i) a pair of a device ID and a device name onto a session 
management server that manages sessions between the 
communication terminals, and (ii) a pair of the device ID and an 
address of the connected communication terminal onto a trigger 
server that notifies the connected communication terminal of a 

25 request made by the session management server, the device ID 
identifying the connected communication terminal, and the device 
name indicating a name of the connected communication 
terminal; a holding unit operable to hold a permission list that is a 
list of device names of communication terminals to which direct 

30 communication is permitted; a polling unit operable to perform, 
upon receiving a request for a communication with the session 
management server from the trigger server, polling on the trigger 
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server so as to receive the request from the trigger server; an 
address resolution unit operable to receive, from the session 
management server, at least an address of the connecting 
communication terminal and a session ID that is unique to the 
5 communication with the connecting* communication terminal; and 
a Peer-to-Peer communication unit operable to perform direct 
communication with the connecting communication terminal in the 
case when the address of the connecting communication terminal 
and the session ID are received. 

10 With this structure, it is possible to assure the security in 

the communication between the . communication terminals since 
the connected communication terminal does not perform 
Peer-to-Peer communication with the communication terminals 
which are not in the permission list. 

15 The connecting communication terminal apparatus 

according to the present invention is a connecting communication 
terminal that performs direct communication with a connected 
communication terminal via a network, said connecting 
communication terminal including: a registration unit operable to 

20 register (i) a pair of a device ID and a device name onto a session 
management server that manages sessions between the 
communication terminals, and (ii) a pair of the device ID and an 
address of the connecting communication terminal onto a trigger 
server that notifies the connected communication terminal of a 

25 request made by the session management server, the device ID 
identifying the connecting communication terminal, and the device 
name indicating a name of the connecting communication 
terminal; a receiving unit operable to receive a request for a 
connection to the connected communication terminal; a 

30 transmission unit operable to transmit device names of the 
connecting communication terminal and the connected 
communication terminal to the session management server, in the 
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case when the request is received; an address resolution unit 
operable to obtain an address of the connected communication 
terminal by receiving, from the session management server, at 
least the address of the connected* communication terminal and a 
5 session ID that is unique to the communication with the connected 
communication terminal, after the transmission performed by said 
transmission unit; and a Peer-to-Peer communication unit 
operable to perform direct communication with the connected 
communication terminal in the case when the address of the 

10 connected communication terminal is received. 

With this structure, the connecting communication terminal 
only has to input or transmit the device name of the connected 
communication terminal to which connection is requested. The 
session management server, on the other hand, judges real-time 

15 the possibility for communication, and notifies the connecting 
communication terminal of the address of the connected 
communication terminal to which connection is requested. It is 
therefore possible to improve authenticity of the communication 
between the communication terminals. 

20 The session management server according to the present 

invention is a session management server that manages direct 
communication between a connecting communication terminal and 
a connected communication terminal, said session management 
server including: a storage unit operable to receive a pair of 

25 device ID and device name that is transmitted from the respective 
communication terminals, the device ID identifying each of the 
communication terminals, and the device name indicating a name 
of each communication terminal; a trigger transmission unit 
operable, upon receiving a connection request in which device 

30 names of the connecting communication terminal and the 
connected communication terminal are described, (i) to extract, 
based on the device name, a device ID of the connected 
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communication terminal from said storage unit, and (ii) to 
transmit, to a trigger server, a trigger for requesting the 
connected communication terminal identified by the device ID to 
transmit a permission list,., the trigger server notifying of the 
5 request made to the connected communication terminal, and the 
permission list being a list of device names of communication 
terminals to which communication is permitted; a name search 
unit operable to search for the device name of the connecting 
communication terminal in the permission list after receiving the 

10 permission list; an address inquiry unit operable to transmit, to 
the trigger server, an address inquiry for inquiring about 
addresses of the connecting communication terminal and the 
connected communication terminal based on the device IDs of the 
communication terminals, in the case when the device name of 

15 the connecting communication terminal is found in the permission 
list; a session generation unit operable to generate a session ID 
that is unique to the communication between the connecting 
communication terminal and the connected communication 
terminal; and a transmission unit operable to transmit (i) at least 

20 the session ID and the address of the connected communication 
terminal to the connecting communication terminal, and. (ii) at 
least the session ID and the address of the connecting 
communication terminal to the connected communication terminal, 
in the case when said address inquiry unit receives, from the 

25 trigger server, the addresses of the communication terminals as a 
response to the address inquiry. 

With this structure, the name search unit in the session 
management server obtains a permission list from the connected 
communication terminal, judges whether or not the connecting 

30 communication terminal is in the list, and permits the 
communication terminals to perform Peer-to-Peer communication 
in the case when the connecting communication terminal is in the 
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list. The session generation unit, on the other hand, generates a 
session ID so that the Peer-to-Peer communication between the 
communication terminals can be managed. 

The trigger server according to the present invention is a 
5 trigger server that manages addresses of a connecting 
communication terminal and a connected communication terminal, 
and that notifies the connected communication terminal of a 
request, the trigger server including: an address storage unit 
operable to receive and store a pair of device ID and address that 

10 is transmitted from the respective communication terminals, the 
device ID identifying each of the communication terminals; a 
receiving unit operable to receive, from a session management 
server, a trigger for requesting a transmission of a permission list, 
the session management server managing sessions between the 

15 connecting communication terminal and the connected 
communication terminal, and the permission list being a list of 
device names of communication terminals to which communication 
is permitted; a trigger processing unit operable to transmit, to the 
connected communication terminal, the request of transmitting 

20 the permission list to the session management server, in the case 
when the trigger is received; and a polling receiving unit operable 
to receive polling performed by the connected communication 
terminal, so as to transmit the request. 

With this structure, the trigger server can always keep the 

25 addresses of the connecting communication terminal and the 
connected communication terminal. When receiving, from the 
session management server, a request for the communication with 
the connected communication terminal, the trigger server can 
obtain real-time the address of the connected communication 

30 terminal and transmit the communication request to the 
connected communication terminal. 

Note that in order to achieve the above objects, the present 
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invention can be realized as the communication method that 
includes, as steps, the characteristic units of the communication 
terminal, and also as a program that includes all the steps. The 
program can be distributed via a storage medium such as a 
5 CD-ROM or a communication network as well as stored in a ROM 
equipped with the communication terminal. 

Further Information about Technical Background to this 
Application 

10 The disclosure of Japanese Patent Application No. 

2004-042416 filed on February 19, 2004, including specification, 
drawings and claims, is incorporated herein by reference in its 
entirety. 

15 Brief Description of Drawings 

These and other objects, advantages and features of the 
invention will become apparent from the following description 
thereof taken in conjunction with the accompanying drawings that 
illustrate a specific embodiment of the invention. In the 
20 Drawings: 

FIG. 1 shows an overall structure of the communication 
system according to a first embodiment of the present invention; 

FIG. 2 is a flowchart showing a procedure in the operation 
performed by the connecting communication terminal according to 
25 the first embodiment; 

FIG. 3 is a reference diagram showing an example of the 
structure of data for requesting a connection; 

FIG. 4A shows an example of the data structure of the 
address notification 400 to be transmitted from a session 
30 management server to the connecting communication terminal 3; 

FIG. 4B shows an example of the data structure of the 
address notification 410 to be transmitted from the session 
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management server to the connected communication terminal; 

FIG. 5 is a flowchart showing a procedure in the operation 
performed by the session management server according to the 
first embodiment; 

5 FIG. 6 is a flowchart showing a procedure in the operation 

performed by the trigger server according to the first 
embodiment; 

FIG. 7 is a flowchart showing a procedure in the operation 
performed by the connected communication terminal according to 
io the first embodiment; 

FIG. 8 is a diagram showing a communication sequence in 
the whole communication system made up of the connected 
communication terminal, the session management server, the 
trigger server and the connecting communication terminal, 
15 according to the first embodiment; 

FIG. 9A is a sequence diagram for sending and receiving 
address notification data between the connecting communication 
terminal or the connected communication terminal, and a router, 
according to the first embodiment; 
20 FIG. 9B is a reference diagram showing a packet data to be 

transmitted from the connected communication terminal or the 
connecting communication terminal to the corresponding router; 

FIG. 9C is a reference diagram of a correspondence table 
held by the respective router; 
25 FIG. 10 shows an overall structure of the communication 

system according to a second embodiment of the present 
invention; 

FIG. 11 is a flowchart showing a procedure in the operation 
performed by the session management server according to the 
30 second embodiment; 

FIG. 12 is a flowchart showing a procedure in the operation 
performed by the connected communication terminal according to 
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the second embodiment; 

FIG. 13 is a diagram showing a communication sequence in 
the communication system made up of the connected 
communication terminal, the session management server, the 
5 trigger server and the connecting communication terminal, 
according to the second embodiment; 

FIG. 14 shows an overall structure of the communication 
system according to a third embodiment of the present invention; 

FIG. 15 is a flowchart showing a procedure in the operation 
10 performed by the Peer-to-Peer communication between the 
connected communication terminal and the connecting 
communication terminal, according to the third embodiment; 

FIG. 16 is a flowchart showing a procedure in the operation 
performed by an end processing unit in the session management 
15 server according to the third embodiment; and 

FIG. 17 is a diagram showing a configuration of the 
communication system using the conventional IP telephone 
apparatuses. 

20 Best Mode for Carrying Out the Invention 

The following describes, with reference to the diagrams, the 
connecting communication terminal, the connected communication 
terminal, the session management server and the trigger server 
according to the present invention. 

25 

(First Embodiment) 

FIG. 1 shows an overall structure of the communication 
system according to the first embodiment. The communication 
system includes: a connected communication terminal 1; a 
30 network 2; a connecting communication terminal 3; a session 
management server 4 that manages the sessions between the 
communication terminals; a trigger server 5 that transmits, to the 
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respective communication terminals 1 and 3, a request from the 
session management server 4; and routers 6 and 7 which are 
relay apparatuses for relaying between the connecting 
communication terminal 3 and the connected communication 
5 terminal 1, and the network 2. 

The connected communication terminal 1 is a terminal 
apparatus to which connection is requested by the connecting 
communication terminal 3, and which is placed at home and is 
connected to the router 6. Such connected communication 
10 terminal 1 includes a registration unit 11, a permission list 
transmission unit 12, a polling unit 13, an address resolution unit 
14, a Peer-to-Peer communication unit 15 and a communication 
unit 16. 

The registration unit 11 registers, onto the trigger server 5, 
15 a pair that is made of a device ID that is unique to each 
communication terminal and an address (e.g., IP address), and 
registers, onto the session management server 4, a pair made of 
the device ID and a device name that is unique to each 
communication terminal. 
20 The permission list transmission unit 12 transmits, to the 

session management server 4, a list of the device names of the 
communication terminals with which the connected communication 
terminal 1 can perform Peer-to-Peer communication. 

The polling unit 13 receives, from the trigger server 5, a 
25 request for communication with the session management server 4. 

In the case when the communication with another 
communication terminal (e.g., the connecting communication 
terminal 3) is permitted, the address resolution unit 14 obtains 
the address of the connecting communication terminal 3 and 
30 information such as a session ID that is unique to each 
communication. 

The Peer-to-Peer communication unit 15 performs data 
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communication with the connecting communication terminal 3 
using the Peer-to-Peer communication that is direct 
communication. The communication unit 16 performs 
communication with the session management server 4 and the 
trigger server 5 

A permission list L is kept in the database 17. The 
permission list L is a list of communication-permitted devices (e.g., 
"TERM 1" and *TERM3" in the diagram) for which Peer-to-Peer 
communication is permitted by the connected communication 
terminal 1. Note that the permission list L can be previously held 
by the connected communication terminal 1 or can be modified by 
the operation using keyboard or the operation on the screen. 

Note that the connected communication terminal 1, as will 
be mentioned later, regularly transmits packet data for notifying 
an address to the trigger server 5 so that the router 6 can hold a 
correlation between local address and global address. Owing to 
the management of global address performed by the trigger 
server 5, a real-time connection can be achieved by always 
identifying the connected communication terminal 1 based on the 
device ID and the like. 

The connecting communication terminal 3 is a terminal 
apparatus that requests, to the connected communication terminal 
1, a connection for communication using IP phones or the like, 
and is connected to the external network 2 via the router 7. 
Such connecting communication terminal 3 includes an address 
resolution unit 31, a connection request unit 32, a registration 
unit 33, a communication unit 34, and a Peer-to-Peer 
communication unit 35. Note that the address resolution unit 31, 
the registration unit 33, the communication unit 34, the 
Peer-to-Peer communication unit 35 are the processing units as 
same as those included in the connected communication terminal 
1, therefore, the detailed description is not repeated here. 
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The connection request unit 32 inputs the device name of 
another communication terminal (e.g., the connected 
communication terminal 1), and transmits, to the session 
management server 4, the device names of the connected 
5 communication terminal 1 as well as the connecting 
communication terminal 3. After that, in the case when the 
communication is permitted, the connection request unit 32 
obtains, from the session management server 4, the address of 
the connected communication terminal 1 and the information such 

10 as a session ID that is unique to each communication. Note that 
it is conceivable to transmit phone numbers in stead of device 
names in the case of telecommunication. 

Note that, in the first embodiment, the name of the 
connected communication terminal 1 is "TERM1", the device ID is 

15 "0001", the address is "10.20.30.1" while the name of the 
connecting communication terminal 3 is "TERM 3", the device ID is 
"0003", the address is "40.50.60.1". 

The session management server 4 is a server apparatus for 
managing sessions such as telecommunication using the 

20 Peer-to-Peer communication between the connecting 
communication terminal 3 and the connected communication 
terminal 1. Such session management server 4 includes a device 
name storage unit 41, a session generation unit 42, a name 
search unit 43, a communication unit 44 and a database 45. 

25 The device name storage unit 41 is a processing unit for 

storing, into the database 45, a pair of device ID and device name 
of the respective connected communication terminal 1 and the 
connecting communication terminal 3. 

The session generation unit 42 detects a device ID based on 

30 the device name of the connected communication terminal 1 
received from the connecting communication terminal 3, and 
transmits, to the trigger server 5, a trigger for requesting the 
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connected communication terminal 1 identified by the detected 
device ID to transmit the permission list L. The session 
generation unit 42 also generates a session ID in the case when 
the communication between the two communication terminals is 
5 permitted by the name search unit 43. 

The name search unit 43 receives the permission list L from 
the connected communication terminal 1, and judges whether or 
not the device name of the connecting communication terminal 3 
is written in the permission list L. In the case when the device 

10 name is found after the search, the name search unit 43 transmits, 
to the trigger server 5, an address inquiry for inquiring about the 
addresses of the connected communication terminal 1 and the 
connecting communication terminal 3. 

The name search unit 43 receives the address of the 

15 connecting communication terminal 3 as a response from the 
trigger server 5, transmits at least the session ID and the address 
of the connected communication terminal 1 to the connecting 
communication terminal 3, and at least the session ID and the 
address of the connecting communication terminal 3, to the 

20 connected communication terminal 1. 

The communication unit 44 performs a sequence of 
communication with the connected communication terminal 1, the 
connecting communication terminal 3 and the trigger server 5. 

The database 45 holds a table 45a in which, the correlation 

25 between the device names stored in the device name storage unit 
41 and device IDs is stored. As shown in the diagram, for 
example, the device name of the connected communication 
terminal 1 "TERM1" and the device name of the connecting 
communication terminal 3 "TERM3" are listed as device names 

30 whereas the device ID w 0001" of the connected communication 
terminal 1 and the device ID "0003" of the connecting 
communication terminal 3 are listed as device IDs. 
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The trigger server 5 is a server for transmitting, to the 
connected communication terminal 1, a trigger for requesting a 
connection for communication with the session management 
server 4. Such trigger server 5 includes an address storage unit 
5 51, a trigger processing unit 52, a polling receiving unit 53, an 
address response unit 54, a communication unit 55 and a 
database 56. 

The address storage unit 51 stores, into the database 56, a 

pair of device ID and address of each communication terminal 
10 (connected communication terminal 1 and connecting 

communication terminal 3 in the case of FIG. 1). 

The trigger processing unit 52 receives a trigger from the 

session management server 4, and transmits the request for the 

communication with the session management server 4 to either 
15 the connected communication terminal 1 or the connecting 

communication terminal 3. 

The polling receiving unit 53 receives a polling from either 

the connected communication terminal 1 or the connecting 

communication terminal 3 in order to transmit the request. 
20 The address response unit 54 receives an address inquiry 

from the session management server 4, extracts the address that 

is inquired, and transmits, to the session management server 4, a 

response to the address inquiry. 

The communication unit 55 performs a sequence of 
25 communication between the connected communication terminal 1, 

the connecting communication terminal 3 and the session 

management server 4. 

In the database 56, an address table 56a is stored in the 

address storage unit 51. For example, the address "10.20.30.1" 
30 of the connected communication terminal 1 and the address 

"40. 50. 60. 1" of the connecting communication terminal 3 are 

listed as addresses. 

-15- 



WO 2005/081493 



PCT/JP2005/003072 



FIG. 2 is a flowchart showing a procedure in the operation 
performed by the connecting communication terminal 3 according 
to the first embodiment. 

Firstly, the registration unit 11 in the connecting 
5 communication terminal 3 transmits, to the trigger server 5, a 
pair of the device ID and the address of the connecting 
communication terminal 3 (S201), and transmits, to the session 
management server 4, a pair of the device ID and the device 
name of the connecting communication terminal 3 (S202). With 

10 such processing, the correlation between the device ID and the 
device name is kept in the session management server 4 while the 
correlation between the device ID and the address is kept in the 
trigger server 5. 

Then, the address resolution unit 31 inputs, with the use of 

15 a keyboard or on the screen, the device name "TERM1" of the 
connected communication terminal 1 to which a connection is 
requested for communication (S203). The address resolution unit 
31 then creates, as a connection request, data in which the device 
name "TERM 3" of its own as well as the device name "TERM1" of 

20 the apparatus on the other side of the communication are 
described. The connection request unit 32 transmits the 
connection request to the session management server 4 via the 
communication unit 34 (S204). 

FIG. 3 is a reference diagram showing an example of the 

25 structure of the data for requesting a connection. The device 
name "TERM3" of the connecting communication terminal 3 that 
transmits a connection request is described as a self-device name 
300 while the device name "TERM1" of the connected 
communication terminal 1 is described as a partner-device name 

30 301. 

In the case when the connection is permitted after the 
session management server 4 searches in the permission list L 
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based on the method to be mentioned later, the address resolution 
unit 14 receives, from the session management server 4, the 
information such as session ID and IP address of the connected 
communication terminal 1, key, and permitted duration, as an 
address notification (S205). 

FIG. 4A shows an example of the data structure of the 
address notification 400 to be transmitted from the session 
management server 4 to the connecting communication terminal 3, 
while FIG. 4B shows an example of the data structure of the 
address notification 410 to be transmitted from the session 
management server 4 to the connected communication terminal 1. 

As shown in FIG. 4A, the session ID 401 includes an ID that 
is unique to the communication with the connected communication 
terminal 1 and that is generated by the session management 
server 4. An address 402 includes the address of the connected 
communication terminal 1. A key 403 is used for encryption and 
decryption for communicating with the connected communication 
terminal 1. The longest communication duration for the 
communication with the connected communication terminal 1 is 
described in a permitted duration 404. In the example shown in 
FIG. 4A, the longest communication duration is sixty minutes. 

After the address resolution unit 31 receives the address 
notification 400 from the session management server 4, the 
Peer-to-Peer communication unit 35 starts communicating with 
the connected communication terminal 1 corresponding to the 
address 402 (S206). Note that encryption and decryption are 
performed on the data to be communicated, using the key 403. 
For example, 3DES and AES are taken as examples of an 
algorithm for encryption and decryption. 

Then, the Peer-to-Peer communication unit 35 terminates 
the communication with the connected communication terminal 1 
in the case when all the data communication with the connected 
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communication terminal 1 is completed, or sixty minutes indicated 
by the permitted duration 404 has elapsed (S207). 

FIG. 5 is a flowchart showing a procedure in the operation 
performed by the session management server 4 according to the 
5 first embodiment. 

Firstly, the device name storage unit 41 in the session 
management server 4 receives a pair of device name and device 
ID from the respective connected and connecting communication 
terminals 1 and 3, and stores them into the database 45 (S501). 

io Then, receiving the connection request shown in FIG. 3 

from the connecting communication terminal 3 (Yes in S502), the 
session generation unit 42 transmits, to the trigger server 5, a 
trigger for requesting the connected communication terminal 1 to 
transmit the permission list L (S503). 

15 Having received the permission list L from the connected 

communication terminal 1 (Yes in S504), the name search unit 43 
searches, in the permission list L, for the device name "TERM 3" of 
the connecting communication terminal 3 (S505). 

In the case when the device name of the connecting 

20 communication terminal 3 is found in the permission list L (Yes in 
S506), the name search unit 43 transmits, to the trigger server 5, 
an address inquiry for inquiring about the addresses of the 
connected communication terminal 1 and the connecting 
communication terminal 3 (S507). 

25 After receiving, from the trigger server, the addresses of 

the connected communication terminal 1 and the connecting 
communication terminal 3 as a response to the address inquiry, 
the session generation unit 42 generates a session ID, a permitted 
duration and a key for the communication between the connected 

30 communication terminal 1 and the connecting communication 
terminal 3 (S508). Note that the values that are already .set 
between the two communication terminals may be used for the 
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information on permitted duration and key. 

Then, the communication unit 44 transmits, as the address 
notification 410, the session ID, the address of the connecting 
communication terminal 3, the permitted duration, and the key, to 
5 the connected communication terminal 1 (S509). The 
communication unit 44 also transmits, as the address notification 
400, the session ID, the address of the connected communication 
terminal 1, the permitted duration and the key, to the connecting 
communication terminal 3 (S510). Here, an example of the 

10 address notification 410 to be transmitted from the session 
management server 4 to the connected communication terminal 1 
is shown in FIG. 4B. As shown in FIG. 4B, the same values are 
described for the session ID 411 of the address notification 410, 
the key 413, the permitted duration 414 as the session ID 401 

15 indicated in the address notification 400, the key 403, and the 
permitted duration 404. Note that an address such as an IP 
address of the connecting communication terminal 3 is described 
in the address 412. 

In the case when the session management server 4 fails to 

20 receive the permission list L from the connected communication 
terminal 1 (No in S504), or in the case when the device name of 
the connecting communication terminal 3 is not found in the 
permission list L (No in S506), an error message is transmitted to 
the connecting communication terminal 3 (S511). 

25 FIG. 6 is a flowchart showing a procedure in the operation 

performed by the trigger server 5 according to the present 
embodiment. 

Firstly, the storage unit 51 in the trigger server 5 receives a 
pair of address and device ID respectively from the connected 
30 communication terminal 1 and the connecting communication 
terminal 3, and stores them into the database 56 as an address 
table 56a (S601). 
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When receiving a trigger from the session management 
server 4 (Yes in S602), the trigger processing unit 52 transmits, 
to the connected communication terminal 1, a request for 
communication with the session management server 4 (S603). 
5 When receiving an address inquiry from the session 

management server 4 (S604), the address response unit 54 
extracts, based on the device IDs, the corresponding addresses of 
the connecting communication terminal 3 and the connected 
communication terminal 1 from the address table 56a stored in 

10 the database 56 (S605). Lastly, the communication unit 55 
transmits the extracted addresses to the session management 
server 4 as an address response (S606). 

FIG. 7 is a flowchart showing a procedure in the operation 
performed by the connected communication terminal 1 according 

15 to the first embodiment. 

Firstly, the registration unit 11 in the connected 
communication terminal 1 transmits a pair of the device ID and 
the address of the connected communication terminal 1 to the 
trigger server 5 (S701), and transmits a pair of the device ID and 

20 the device name of the connected communication terminal 1 to 
the session management server 4 (S702). With such processing, 
data such as device IDs is stored beforehand into the respective 
servers 4 and 5. 

Then, when receiving, from the trigger . server 5, the 

25 request for communication with the session management server 4 
(Yes in S703), the polling unit 13 performs polling for the session 
management server 4. The permission list transmission unit 12 
transmits the permission list L to the session management server 
4 (S704). 

30 When the address resolution unit 14 receives the address 

notification 410 shown in FIG. 4B from the session management 
server 4 (Yes in S705), the Peer-to-Peer communication unit 15 
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starts, using the session ID 411, the key 413 and the permitted 
duration 414, the communication with the connecting 
communication terminal 3 corresponding to the address 412 
(S706). 

5 In the case when all the data communication with the 

connecting communication terminal 3 is completed, or in the case 
when sixty minutes indicated in the permitted duration 414 has 
elapsed, the Peer-to-Peer communication unit 15 terminates the 
communication with the connecting communication terminal 3 

10 (Yes in S707). 

FIG. 8 is a diagram showing a communication sequence in 
the whole communication system made up of the connected 
communication terminal 1, the session management server 4, the 
trigger server 5 and the connecting communication terminal 3, 

15 according to the first embodiment. Note that the routers 6 and 7 
are placed, as relay apparatuses, between the connecting 
communication terminal 3 and the connected communication 
terminal 1, and the network 2, and that the present invention 
utilizes the nature of routers in the case of using a 

20 connectionless-type UDP as a communication protocol. In other 
words, the present invention makes use of the tendency that the 
respective routers 6 and 7 hold a correlation between local 
address and global address for a certain period of time for sending 
and receiving packet data. This is due to the . communication 

25 using the contactless-type UDP in which whether or not response 
is received from the other end of the communication is not known. 
Note that in TCP, the respective routers 6 and 7 create a 
conversion table when a two-way connection is established for 
data communication, and have a system of deleting the 

30 correlation between local address and global address when the 
connection is cut off. 

First, the connecting communication terminal 3 and the 
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connected communication terminal 1 respectively perform 
registration of device ID and device name onto the session 
management server 4 (801 and 802), and performs registration of 
address and device ID onto the trigger server 5 (803 and 804). 
5 In the case when the connecting communication terminal 3 

requests a connection to the connected communication terminal 1, 
the connecting communication terminal 3 transmits a connection 
request (805) in which the device name shown in FIG. 3 is 
described. The session management server 4 then transmits, to 

10 the trigger server 5, a trigger (806) for requesting a 
communication with the connected communication terminal 1. 
Note that, here, address notification packet data is regularly 
transmitted from the respective connecting communication 
terminal 3 and connected communication terminal i. It is 

15 therefore possible for the trigger server 5 to obtain real-time the 
IP address of the connected communication terminal 1, using 
device ID. 

Then, the connected communication terminal 1, having 
received the request (807) for the connection with the session 
20 management server 4, transmits the permission list L held in the 
permission list database 17 to the session management server 4 
(808). 

The session management server 4 judges whether or not 
the device name of the connecting communication terminal 3 is 

25 found in the permission list L. In the case when the device name 
is found, the session management server 4 inquires the trigger 
server 5 of the address (809). 

Having obtained, from the trigger server 5, the addresses of 
the connecting communication terminal 3 and the connected 

30 communication terminal 1 (810), the session management server 
4 generates a session ID, a permitted duration, a key to be used 
for Peer-to-Peer communication, and transmits the data shown in 



-22- 



WO 2005/081493 



PCT/JP2005/003072 



FIG. 4 to the respective connecting communication terminal 3 and 
connected communication terminal 1 (811 and 812). 

After the Peer-to-Peer communication between the 
connecting communication terminal 3 and the connected 
5 communication terminal 1 starts (813). Note that in the case 
when the communication is terminated, it is conceivable that the 
respective terminals send a communication end notification (814 
and 815) so that the session management server 4 can manage 
call duration or the like. It should be also noted that a UDP 
10 protocol may be used as a communication protocol for sending the 
request (807) for the communication with the session 
management server 4, while a different communication protocol 
such as a TCP protocol may be used for other sessions (801 to 
806, 808 to 815). 

15 FIG. 9A is a sequence diagram for sending and receiving 

address notification data between the connecting communication 
terminal 3 and the connected communication terminal 1, and the 
routers 6 and 7, according to the first embodiment. The routers 
6 and 7, in general, relay the data to be sent or received via both 

20 the external and internal networks, and have the function to 
convert, from global to local, the IP address described in the IP 
header, and to intentionally discard the packet data that satisfies 
the pre-set conditions. As shown in the present diagram, the 
communication terminals 1 and 3 regularly transmit, using the 

25 connectionless-type UDP, the local packet intended for address 
notification. The routers 6 and 7 can therefore always hold the 
correlation between the local addresses of the communication 
terminals 1 and 3 and global addresses. Also, the trigger server 
5 can properly manage the global addresses of the communication 

30 terminals 1 and 3, therefore, it is possible for the trigger server 5 
to transmit real-time, to the connected communication terminal 1, 
the connection request made by the connecting communication 
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terminal 3. 

The local packet shown in FIG. 9A is a packet data 901 to 
be transmitted from the communication terminal 1 or 3 to the 
router 6 or 7. As shown in FIG. 9B, the packet data 901 is made 
5 up of a header section that includes a destination address, a 
destination port number, a source address, a source port number, 
and a data section. The source address includes the local 
addresses of the communication terminals while the destination 
address includes the global address of the trigger server 5. 

10 A global packet is packet data to be transmitted from the 

router 6 or 7 to the trigger server 5. The router converts the 
source address and the source port number into the global 
address that is unique to the router 6 or 7. The source address 
includes the global address of the router 6 or 7 while the 

15 destination address includes the global address of the trigger 
server 5. 

The communication terminal 1 or 3 transmits a local packet 
to the router 6 or 7 at regular polling intervals (e.g. three 
minutes). The correlation between the local address of the local 

20 packet transmitted to the router 6 or 7 and the global address 
normally disappears after the retention period has elapsed. 
According to the present invention, however, packet data is 
transmitted at regular polling intervals before the retention period 
is passed. The router 6 or 7 thus always keeps, the correlation 

25 between local addresses and global addresses. The router can 
therefore convert, from global to local, the destination address in 
order to transmit the request for communication with the session 
management server 4, from the trigger server 5 on the global side. 
The router 6 or 7 can thus relay the converted address to the 

30 connected communication terminal 1. 

FIG. 9C is a reference diagram of a correspondence table 
902 held by the router 6 or 7. In the correspondence table 902, 

-24- 



WO 2005/081493 



PCT/JP2005/003072 



the local address and the port number of the local network and 
the global address and the port number of the external network 
are described in one-to-one correspondence. When receiving a 
local packet, the router 6 or 7 converts the source address, which 
5 is included in the local packet in order to effectively use the global 
address, into the global address of the router 6 or 7. The router 
6 or 7 then converts the source port number into the port number 
at which the router 6 or 7 can receive, generates a global packet, 
and transmits the global packet to the trigger server 5. 

10 As described above, in the communication system according 

to the first embodiment, the session management server 4 can 
obtain the permission list L held by the connected communication 
terminal 1 only when the connecting communication terminal 3 
transmits the name of the device at the other end of the 

15 communication, with which communication is requested. The 
session management server 4 can also judge whether or not the 
communication is permitted with reference to the permission list L, 
and Peer-to-Peer communication between the connecting 
communication terminal 3 and the connected communication 

20 terminal 1 is performed only in the case when the communication 
is permitted. Thus, it is possible to improve authenticity, of the 
communication between the communication terminals. 

Since the trigger server 5 always manages the address 
information of the connected communication terminal 1, the 

25 trigger server 5 can transmit, to the connected communication 
terminal 1, a request for communication with the session 
management server 4. It is therefore possible to realize 
Peer-to-Peer communication as well as a real-time judgment on 
whether or not communication is permitted. 

30 Moreover, due to the fact that the connecting 

communication terminal 3 and the connected communication 
terminal 1 previously set an encryption method and a permitted 
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duration for the session management server 4, it is possible for 
the session management server 4 to manage more appropriately 
the communication between the communication terminals. 

Note that, in the first embodiment, the session 
5 management server 4 and the trigger server 5 are assumed to be 
independent server apparatuses, however, a single server 
apparatus may have the functions equipped with such servers. 
The number of communication terminals is assumed to be two: 
one is a connected communication terminal 1 and the other is a 
10 connecting communication terminal 3. The number, however, 
may be three or more. It is also described that the device name 
of the connected communication terminal 1 is "TERM1", the device 
name of the connecting communication terminal 3 is "TERM3", the 
device ID of the connected communication terminal 1 is "0001", 
15 the device ID of the connecting communication terminal 3 is 
"0003", the session ID is W S0001", and the permitted duration is 
"sixty minutes". The present invention, however, is not limited to 
the referential marks and numbers. 

(Second Embodiment) 

The following describes the communication system 
according to the second embodiment of the present invention. 
Note that the second embodiment is characteristic in that the 
connected communication terminal holds the permission list, 
judges on whether or not connection is permitted to the 
connecting communication terminal, and transmits the permission 
list to the session management server. 

FIG. 10 shows an overall structure of the communication 
system according to the second embodiment. The communication 
system includes the connected communication terminal 1, the 
network 2, the connecting communication terminal 3, the session 
management server 4, the trigger server 5, and the routers 6 and 
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7. Note that, in the second embodiment, the same referential 
marks are put for the same components as those in the 
communication system according to the first embodiment, and the 
description is not repeated here. 
5 The connected communication terminal 1 includes a 

connection permission unit 1001 in stead of the permission list 
transmission unit 12 that is a component of the connected 
communication terminal 1 according to the first embodiment. 

In the case when the communication unit 16 receives, from 

10 the trigger server 5, a request for search in list that is made to 
the session management server 4, the connection permission unit 
1001 searches in the permission list L stored in the database 17, 
and judges whether or not the connection to the connecting 
communication terminal 3 is permitted, and transmits the result 

15 to the session management server 4. 

Note that the name search unit 43 shown in the first 
embodiment is omitted from the session management server 4 
according to the second embodiment since the connection 
permission unit 1001 in the connected communication terminal 1 

20 judges whether or not the connection is permitted. The 
structures of the connecting communication terminal 3 and the 
trigger server 5 are as same as those described in the first 
embodiment. 

FIG. 11 is a flowchart showing a procedure in the operation 
25 performed by the session management server 4 according to the 
second embodiment. Note that the same numbers are put for the 
steps indicating the same operation as performed by the session 
management server 4 shown in FIG. 5. 

Firstly, the device name storage unit 41 in the session 
30 management server 4 receives a pair of device name and device 
ID from the respective connected communication terminal 1 and 
connecting communication terminal 3, and stores them into the 
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database 45 (S501). Then, when receiving the connection 
request shown in FIG. 3 from the connecting communication 
terminal 3 (Yes in S502), the session generation unit 42 transmits, 
to the trigger server 5, a trigger for requesting the connected 
5 communication terminal 1 to send the result of the judgment on 
whether or not the Peer-to-Peer communication with the 
connecting communication terminal 3 is permitted (S503). 

Then, the session generation unit 42 receives the result of 
search from the connected communication terminal 1. In the 

10 case of receiving the result indicating that the device name of the 
connecting communication terminal 3 is written in the permission 
list L (Yes in S1101), the session generation unit 42 inquires of 
the addresses of the connected communication terminal 1 and the 
connecting communication terminal 3 (S507). 

15 Having received, as a response to the inquiry, the 

addresses of the connecting communication terminal 3 and the 
connected communication terminal 1, the session generation unit 
42 generates information such as a session ID, a permitted 
duration and a key to be used for the communication between the 

20 connected communication terminal 1 and the connecting 
communication terminal 3 (S508). 

Then, the communication unit 44 transmits, to the 
connecting communication terminal 3, the session ID, the address 
of the connected communication terminal 1, . the permitted 

25 duration and the key, as an address notification 400 (S509). The 
communication unit 44 also transmits, to the connected 
communication terminal 1, the session ID, the address of the 
connecting communication terminal 3, the permitted duration and 
the key, as an address notification 410 (S510). Here, the 

30 information included in the address notification is as same as that 
shown in FIG. 4 in the first embodiment. Note that, in the case 
of receiving the result indicating that the device name of the 
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connecting communication terminal 3 is not found in the 
permission list L (No in S1101), the session generation unit 42 
transmits an error message to the connecting communication 
terminal 3 (S511). 
5 FIG. 12 is a flowchart showing a procedure in the operation 

performed in the connected communication terminal 1 according 
to the second embodiment. 

First, the registration unit 11 in the connected 
communication terminal 1 transmits a pair of device ID and 

10 address of the connected communication terminal 1, to the trigger 
server 5 (S701), and transmits a pair of device ID and device 
name of the connected communication terminal 1 to the session 
management server 4 (S702). 

Then, in the case of receiving, from the trigger server 5, a 

15 request for search result which is made to the session 
management server 4 (Yes in S1201), the polling unit 13 requests 
the session management server 4 to send, as a response, the 
device name of the connecting communication terminal 3 (S1202). 
In the meantime, the connection permission unit 1001 judges 

20 whether or not the obtained device name is found in the 
permission list L (S1203). In the case when the device name is 
found in the permission list L, the connection permission unit 
1101 transmits, to the session management server 4, a signal 
indicating that the communication is permitted (S1204). 

25 When the address resolution unit 14 receives, from the 

session management server 4, the address notification 410 as 
shown in FIG. 4B (Yes in S705), the Peer-to-Peer communication 
unit 15 starts, using the session ID 411, the key 413, the 
permitted duration 414, the Peer-to-Peer communication with the 

30 connecting communication terminal 3 corresponding to the 
address 412 (S706). 

In the case when all the data communication with the 
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connecting communication terminal 3 is completed, or in the case 
when the permitted duration 414 expires, the Peer-to-Peer 
communication unit 15 terminates the communication with the 
connected communication terminal 1 (Yes in S707). Note that 
5 the procedure in the operations performed respectively by the 
connecting communication terminal 3 and the trigger server 5 are 
as same as those described in the first embodiment. The detailed 
description is therefore not repeated here. 

FIG. 13 is a diagram showing a communication sequence in 

10 the communication system made up of the connected 
communication terminal 1, the session management server 4, the 
trigger server 5 and the connecting communication terminal 3, 
according to the second embodiment. Note that the same 
referential marks are put for the same processing as in FIG. 8 

15 described above, and the detailed description is not repeated 
here. 

First, the connecting communication terminal 3 and the 
connected communication terminal 1 respectively register the 
device ID and the device name into the session management 

20 server 4 (801 and 802). The respective connecting 
communication terminal 3 and the connected communication 
terminal 1 also register the address and the device ID into the 
trigger server 5 (803 and 804). 

Next, in the case of requesting a connection to the 

25 connected communication terminal 1, the connecting 
communication terminal 3 transmits, to the session management 
server 4, a connection request (805) in which the device name 
shown in FIG. 3 is written, and transmits, to the trigger server 5, 
a trigger (806) for requesting the result of the search that is 

30 made in the permission list L. 

Then, having received the request for the search result 
(1301) that is made to the session management server 4, the 
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connected communication terminal 1 inquires the session 
management server 4 of the device name of the connecting 
communication terminal (S1302). In the case of receiving the 
device name of the connecting communication terminal 3 from the 
5 session management server 4 (1303), the connection permission 
unit 1001 judges on the possibility for the connection with 
reference to the permission list L, and sends back a 
communication permission to the session management server 4 in 
the case when the connection is permitted (1304). Note that the 
10 procedure performed thereafter is as same as that shown in FIG. 
8. 

As described above, in the communication system according 
to the second embodiment, the connected communication terminal 
1 holds the permission list L, and the connection permission unit 

15 1001 makes a judgment on the connecting communication 
terminal 3 in order to permit the connection to the connecting 
communication terminal 3. It is therefore possible to prevent the 
address of the connected communication terminal 1 from being 
passed to the ill-intentioned third party, and to enhance the 

20 authenticity of the communication between communication 
terminals. 

The session management server 4 can obtain, from the 
connected communication terminal 1, the result of the search 
made in the permission list L. It is therefore also possible to 
25 reduce the loads of processing executed by the session 
management server 4 since there is no need to obtain the 
permission list L from the connected communication terminal 1. 

(Third Embodiment) 
30 The following describes the communication system 

according to the third embodiment of the present invention. Note 
that the third embodiment provides a method to properly manage 
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a communication duration permitted for the communication 
between the communication terminals (hereinafter to be referred 
to as "permitted duration"). 

FIG. 14 is an overall structure of the communication system 
5 according to the third embodiment. Note that, in FIG. 14, the 
same referential marks are put for the same components as 
shown in FIG. 1, and the description is not repeated here. 

The connected communication terminal 1401 includes, in 
addition to the processing units included in the connected 

10 communication terminal 1 described in the previous embodiments, 
an end unit 1401a which transmits a request for extension of 
permitted duration to a session management server 1404, 
receives a new permitted duration time from the session 
management server 1404 and a communication end request from 

15 a trigger server 1405, and transmits an end notification to the 
session management server 1404 in the case when the 
communication with the connecting communication terminal 1403 
is terminated. 

The connecting communication terminal 1403 includes the 
20 same processing units as those included in the connected 
communication terminal 1401. 

The session management server 1404 includes, in addition 
to the processing units included in the session management 
server 4 according to the first embodiment, an end processing 
25 unit 1404a. The end processing unit 1404a receives the request 
for an extension of the permitted duration from the connected 
communication terminal 1401 or the connecting communication 
terminal 1403, transmits a new permitted duration time, transmits, 
to the trigger server 1405, a communication end request for 
30 terminating the communication between the connected 
communication terminal 1401 and the connecting communication 
terminal 1403, and receives an end notification from the 
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connected communication terminal 1401 or the connecting 
communication terminal 1403. 

The trigger server 1405 includes, in addition to the 
processing units included in the trigger server 5, an end request 
5 unit 1405a which receives a communication end request from the 
session management server 1404, and transmits the 
communication end request to the connected communication 
terminal 1401 or the connecting communication terminal 1403. 

FIG. 15 is a flowchart showing a procedure in the operation 

10 performed during the Peer-to-Peer communication between the 
connected communication terminal 1401 and the connecting 
communication terminal 1403 according to the third embodiment. 
Note that the operation until the start of the Peer-to-Peer 
communication is as same as S201 to S205 shown in FIG. 2 and 

15 S701 to S705 in FIG. 7. 

Firstly, in the case of receiving a communication end 
request from the end request unit 1405a included in the trigger 
server 1405 while the communication terminals communicate (Yes 
in S1502), the end unit 1401a terminates the communication and 

20 transmits an end notification to the session management server 
1404 (S1508). 

In the case when neither a communication end notification 
is received (No in S1502) nor the data communication is 
completed (No in S1503), a comparison between the permitted 

25 duration and the time elapsed since the start of the 
communication (S1504). For example, when the communication 
continues and reaches 70% of the permitted duration, it is judged 
that the permitted duration is "nearly expiring". In the first 
embodiment, the session management server 4 specifies sixty 

30 minutes as a permitted duration in the address notifications 400 
and 401. In the case when the data communication is not 
completed even after forty-two minutes passes since the start of 
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the communication between the connected communication 
terminal 1401 and the connecting communication terminal 1403 
(Yes in S1504), the end unit 1401a judges the permitted duration 
as "nearly expiring", and transmits, to the session management 
5 server 1404, a request for extension of the permitted duration 
(S1505). 

Then, in the case of receiving a new permitted duration 
from the session management server 1404 (Yes in S1506), the 
end unit 1401a extends the permitted duration (S1507) and 
10 continues the communication between the connected 
communication terminal 1401 and the connecting communication 
terminal 1403. 

FIG. 16 is a flowchart showing a procedure in the operation 
performed by the end processing unit 1404a included in the 
15 session management server 1404 according to the third 
embodiment. 

The name search unit 43 transmits the address notification 
410 to the connected communication terminal 1401, and the 
address notification 400, to the connecting communication 
20 terminal 1403. After that, in the case of receiving an end 
notification from the connected communication terminal 1.401 or 
the connecting communication terminal 1403 (Yes in S1601), the 
end processing unit 1404a stores the end notification into a log 
(S1606). 

25 In the case when an end notification is not received (No in 

S1601) but a request for the extension of the permitted duration 
is received from the connected communication terminal 1401 or 
the connecting communication terminal 1403 (Yes in S1602), the 
permitted duration is newly set and then transmitted to the 

30 communication terminal, that is, a sender of the request for 
extension of the permitted request (S1603). 

In the case when the request for the extension of the 
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permitted duration is not received (No in S1602), and the 
connected communication terminal 1401 and the connecting 
communication terminal 1403 are forced to terminate the 
communication for some reason (Yes in S1604), a communication 
5 end request is transmitted to the trigger server 1405 (S1605). 

When receiving a communication end request from the 
session management server 1404, the end request unit 1405a 
included in the trigger server 1405 transmits a communication 
end request to the connected communication terminal 1401 or the 

10 connecting communication terminal 1403. 

As described above, in the communication system according 
to the third embodiment, it is possible for the session 
management server 1404 to extend a permitted duration or to 
forcedly terminate the communication between the connecting 

15 communication terminal 1403 and the connected communication 
terminal 1401, according to the state of the communication. The 
session management server 1404 can thus manage the 
communication based on Peer-to-Peer communication more 
appropriately. 

20 Note that, in the third embodiment, 70% is set as a 

criterion for the judgment on whether or not the permitted 
duration is nearly expiring, however, a different criterion may be 
used instead. Also, the session management server 1404 stores 
an end notification after receiving it, however, the session 

25 management server 1404 may perform other processing after the 
reception of the end notification. 

Although only some exemplary embodiments of this 
invention have been described in detail above, those skilled in the 
art will readily appreciate that many modifications are possible in 

30 the exemplary embodiments without materially departing from the 
novel teachings and advantages of this invention. Accordingly r all 
such modifications are intended to be included within the scope of 



-35- 



WO 2005/081493 



PCT/JP2005/003072 



this invention. 

Industrial Applicability 

The connecting communication terminal and the connected 
5 communication terminal according to the present invention are 
useful, for example, as terminal apparatuses used for IP 
telecommunication. The communication terminals according to 
the present invention are applicable to services for exchanging a 
massive amount of data such as picture data and audio data 
10 between the communication terminals in the Peer-to-Peer 
communication. 
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